CVE-2007-4874

This exploit demonstrates a cross-site scripting (XSS) vulnerability in SimpNews 2.41.03 by injecting a malicious script via the 'backurl' parameter in the comment.php file. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in SimpNews by injecting malicious JavaScript into the 'l_username' parameter. The payload triggers an alert displaying the user's cookies, proving arbitrary script execution in the context of the affected site.